Security Weekly - A CRA Resource: Hacking All The Devices, with AI? - Rob Allen - PSW #941

Rob Allen from ThreatLocker joins us to discuss securing agentic AI with zero-trust controls, least privilege, and access controls to limit what agents can access and do.

This segment is sponsored by ThreatLocker. Visit https://securityweekly.com/threatlocker to learn more about them!

In the security news this week:

- Sixteen-year-old Linux LPEs still work
- Ubiquiti UniFi, patch it, also light on details
- If you remember magicJack, you too are old
- Slovakia doesn't trust its own speed cameras
- More homework on NIST's vulnerability database
- Your webcam, mic, and key light, all owned
- Printer moonlights as Minecraft server
- Zombie credit cards
- Your car's infotainment system fuels botnets
- Feds warn about AI-powered PLC attacks
- Can an AI actually reverse engineer its way out?
- Denver International's security breach, volume six
- Charlotte's breach and a parking company
- Why your ancient tech might be the safe one
- Microsoft counts billions of phishing emails
- A password vault that leaked to any website
- Australia sells password books at the post office
- Another perfect ten, this time in Entra ID
- Cisco's bug scores read like Olympic gymnastics

Visit https://www.securityweekly.com/psw for all the latest episodes!

Show Notes: https://securityweekly.com/psw-941

00:00:00 Hacking Devices with AI: A Security Weekly Preview
00:01:14 Unpacking Agentic AI's Productivity vs. Security Dangers
00:07:34 Treating AI Agents Like Users: Granular Security Controls
00:17:57 Securing Cloud Data and Access Against AI-Driven Attacks
00:33:17 Transitioning to This Week's Cybersecurity Headlines
00:36:12 Exploiting Expired Credit Cards: The Visa Kernel 3 Flaw
00:51:41 Unpacking AI-Assisted PLC Exploits and OT Security Gaps
01:08:21 Physical Security Failures at Denver International Airport
01:12:17 Why Ancient Technology Might Be Your Safest Bet
01:25:12 Charlotte's Parking Company Breach: Convenience vs. Security
01:30:38 The Dangers of QR Code Stickers on Gas Pumps
01:39:48 Rethinking Password Security: Books, Managers, and Brains
01:48:08 Android's Reach: Badbox Malware in Cars and Beyond
01:53:42 Compromising Podcast Gear and AI's Stubborn Writing Style